PT-2019-1413 · Microsoft · Smbv2+1

Published 2019-02-12 · Updated 2026-03-01 · CVE-2019-0630

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Server Message Block 2.0 (SMBv2) (affected versions not specified)

Description A remote code execution issue exists in the way the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests. This issue is related to unsafe privilege management. Exploitation of this issue may allow a remote attacker to execute arbitrary code by sending a specially crafted packet to the SMBv2 server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Improper Privilege Management

Weakness Enumeration

CWE-19

CWE-269

Related Identifiers

BDU:2019-00795

CVE-2019-0630

Affected Products

Smbv2

Windows

References · 8

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0630 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0630 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-0630 · Security Note
• https://bdu.fstec.ru/vul/2019-00795 · Security Note
• https://osv.dev/vulnerability/CVE-2019-0630 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2019-0630 · Vendor Advisory
• http://securityfocus.com/bid/106876 · Note
• https://securityfocus.com/bid/106876 · Note